Privacy Policy

Nishikawa Taiwan Co., Ltd. (hereinafter “we” or “us”) regards the proper protection of your personal data as an important responsibility. We comply with the Personal Data Protection Act of Taiwan and other applicable laws and regulations, and handle personal data in accordance with this Policy. This Policy applies to the personal data we collect through this website (nishikawa1566.com.tw, hereinafter “this Site”), our LINE Official Account, the booking forms reached from this Site, and our retail stores.

1. Categories of personal data we collect

We collect the following personal data to the extent necessary.

• ・Information you enter in the inquiry form: name, email address, telephone number, content of your inquiry, and similar items
• ・Information you enter when making a booking: name, contact details, preferred date and time, store you wish to visit, and similar items
• ・Information we collect in connection with purchases and customer service at our stores: name, contact details, purchase history, and similar items
• ・Measurement records we collect at our stores for made-to-order pillows and similar services: name, contact details, measurement results, records of your preferences, and records of the sleep concerns you share with us during the consultation
• ・Information we collect when you add or link our LINE Official Account: your LINE display name and identifier, the content of our exchanges, the name, contact details and booking preferences you provide in the chat, and records of message opens and link transitions
• ・Information collected automatically as you use this Site: cookies, access logs, IP address, browsing environment such as browser and device information, browsing and behavioural history, and on-screen interaction records as described in Section 9

2. Purposes, recipients, methods and territories of use

We collect personal data based on your consent or on a contractual or quasi-contractual relationship with you, and use it for the following purposes.

• ・To respond to inquiries and consultations and to contact you as necessary
• ・To accept and confirm bookings and to guide you on the day of your visit
• ・To deliver products purchased at our stores and to handle returns, exchanges and after-sales service
• ・To provide products and services tailored to you, such as made-to-order pillows
• ・To distribute information, provide guidance, respond to inquiries and accept bookings through our LINE Official Account
• ・To inform you about products, services and campaigns
• ・To improve this Site and our services, to carry out statistical analysis and to raise quality
• ・To respond to legal requirements and to carry out other operations incidental to the above

We use personal data within the scope of the recipients, methods and specified purposes set out in this Policy and only as far as necessary. We provide personal data to third parties or use it beyond the specified purposes only where the law permits, or where we have obtained the necessary consent.

Recipients: us, and the service providers we engage as set out in Section 6. Those providers include Nishikawa Co., Ltd. (Japan), which supports the operation of our business in Taiwan.
Methods: we collect personal data through the forms on this Site, the booking system, email, our LINE Official Account, and paper forms and measuring equipment at our stores, and use it within the scope of this Policy and the purposes of collection.
Territories: primarily Taiwan and Japan. We also handle personal data within the scope set out in Section 5.
Period of use: as set out in Section 8.

3. Use for marketing purposes and how to stop it

You may ask us at any time, free of charge, to stop using your personal data to inform you about products, services and campaigns. We explain how to stop it when we first contact you for that purpose. On receiving your request, we will promptly cease using your personal data for that purpose.

4. Consent

On every screen where we collect personal data, we state the purposes, categories, period of use, territories of use, recipients and methods of use, together with your rights, and you submit your information after reviewing that notice.

We present consent to use for marketing purposes as a separate item from the notice described above. That consent is optional, and declining it does not prevent you from using basic services such as receiving answers to inquiries or making bookings. For cross-border transfers, Articles 8 and 21 of the Personal Data Protection Act of Taiwan require notice of the territories of use at the time of collection, so we present Section 5 as that notice rather than asking for separate consent.

Each screen distinguishes required fields from optional ones and explains what happens if a required field is not provided. Where we collect special categories of personal data as defined in Article 6 of the Personal Data Protection Act of Taiwan, we obtain consent separately by the method the law prescribes.

We keep a record of the version of the consent text, the date and time, the person giving consent, and the screen on which it was given.

5. Cross-border transfer of personal data

The web server for this Site is located in Japan. We also use service providers inside and outside Japan to deliver our services. Your personal data may therefore be transferred to, or stored in, countries and regions outside Taiwan to the extent necessary to achieve the purposes of use.

The main countries and regions to or in which personal data may currently be transferred or processed, and the purposes involved, are as follows.

• ・Japan: the web server for this Site, the booking system servers and database, booking notifications, and Nishikawa Co., Ltd., which we engage as a service provider. Your personal data may be stored or processed in Japan.
• ・United States: access analytics and analysis of on-screen interaction records, and booking-related email delivery
• ・Asia-Pacific region: storage of images and document files held in the booking system
• ・Other countries and regions: routing and security of communications to the booking pages, provided by a service provider whose network is distributed worldwide
• ・For the operation of our LINE Official Account, the regions determined by the provider of that account. This includes the name, contact details and booking preferences you provide in the chat. Nishikawa Co., Ltd. (Japan), which we engage as a service provider, also handles this information.
• ・For the provision of point-of-sale and customer management systems for our stores, the regions determined by the provider of those systems. That provider states in its own privacy policy that it handles personal data through service providers and in multiple regions.
• ・For the storage of email in which we receive inquiries, Japan. We receive and store it on servers operated by the same provider as this Site.
• ・For the shared drive we use together with Nishikawa Co., Ltd., the regions determined by the provider of that cloud storage service. That provider states in its own privacy policy that it operates servers worldwide and may process your information on servers located outside your country of residence.

Even where personal data is transferred outside Taiwan, we remain responsible as the data controller under the Personal Data Protection Act of Taiwan, and we take the measures necessary to ensure that personal data continues to be protected appropriately at the destination in accordance with this Policy and applicable laws.

6. Provision to third parties and outsourcing

We do not provide personal data to third parties without obtaining your prior consent, except in the following cases.

• ・Where required by law
• ・Where it is necessary to protect the life, body or property of a person and obtaining your consent is difficult
• ・Where you have given your consent

We may outsource all or part of the handling of personal data to the extent necessary to achieve the purposes of use. Our main service providers and the work entrusted to them are as follows.

• ・Provider of point-of-sale and customer management systems: provision of point-of-sale and customer management systems for our stores
• ・Provider of the booking system: provision of the booking system and the acceptance and management of bookings
• ・Provider of our LINE Official Account: delivery of LINE notifications such as booking confirmations
• ・Provider of the web server: provision of the web server for this Site
• ・Provider of the mail server: receipt and storage of email in which we receive inquiries
• ・Contractor for web production and maintenance: production, maintenance and operation of this Site
• ・Nishikawa Co., Ltd. (Japan): support for the planning and operation of products and services for our business in Taiwan
• ・Provider of our cloud storage service: storage, on the shared drive we use together with Nishikawa Co., Ltd., of files used in our business in Taiwan
• ・Delivery companies: delivery of products purchased at our stores

Through contracts with our service providers and other appropriate means, we define the scope of handling, security measures, whether and on what terms further subcontracting is permitted, notification in the event of an incident, and the return or deletion of information when the contract ends, and we verify and supervise their performance appropriately.

7. Security measures and response to incidents

To prevent the leakage, loss, damage or alteration of personal data, we take appropriate security measures including the following.

• ・We limit the staff who can access personal data to the minimum necessary for their work, and manage accounts and passwords appropriately.
• ・When a member of staff leaves or changes role, we promptly remove their access rights. We also review the list of right holders regularly.
• ・We store information collected on paper in a lockable location and limit who may view it.
• ・We update our systems and software regularly, and record and retain access logs.
• ・If a personal data breach occurs, we act to prevent the damage from spreading, investigate the cause and the impact, preserve the necessary records, and notify you and, where required, report to the competent authority in accordance with applicable laws.

8. Retention and disposal of personal data

We retain personal data for the period necessary to achieve the purposes of use, or for the period for which retention is required by law or by our operations. The retention period for each category of information is as follows.

• ・Membership information: retained while your membership remains valid. We delete it promptly when your membership ends or when you ask us to delete it.
• ・Records of purchases and returns at our stores: retained on an ongoing basis so that we can handle returns, exchanges and after-sales enquiries. We delete them promptly when you ask us to. However, records that constitute accounting vouchers are retained until five years have passed since the completion of the settlement of accounts, in accordance with Article 38 of the Business Entity Accounting Act.
• ・Records of bookings and cancellations: retained on an ongoing basis so that we can serve you with your visit history in mind. We delete them promptly when you ask us to.
• ・History of inquiries and LINE exchanges: retained on an ongoing basis so that we can respond with the previous context in mind. We delete it promptly when you ask us to.
• ・Measurement records and customer service records from our stores: retained on an ongoing basis from the date the record is created, so that we can handle requests to remake a made-to-order pillow or to measure you again. We delete them promptly when you ask us to.
• ・Records of consent, withdrawal and opt-out: until the retention period for the information to which the record relates expires
• ・Server access logs and error logs: 30 days
• ・On-screen interaction logs for this Site: 180 days
• ・Records of changes to access rights: retained on an ongoing basis
• ・Records whose retention is required by law: for the period prescribed by the applicable laws

Once the retention period has passed, or once the purpose of use has ceased, we delete the personal data or stop processing and using it. We dispose of information collected on paper by shredding or similar means, and delete electronic data including backups. If we close or withdraw from our business, we will likewise dispose of or delete personal data promptly by appropriate means.

9. Cookies, access analytics and interaction records

On this Site we use cookies and the following tools to improve convenience, analyse how the Site is used and improve our services.

• ・Access analytics tool: measurement of page views, referral sources, an overview of devices and regions, and movement within the Site
• ・On-screen interaction analysis tool: recording of interactions such as scrolling, clicks and mouse movement, and analysis for improvement by replaying and aggregating those records

Where the information obtained through these tools can identify a specific individual when combined with other information, we handle that information as personal data.

You can restrict or disable cookies through the settings of the browser or device you are using. If you do, some functions of this Site may not be available. For how to change those settings, please refer to the guidance published by your browser provider.

• ・Google Chrome
• ・Safari
• ・Microsoft Edge
• ・Mozilla Firefox

10. Your rights and how to exercise them

Under Article 3 of the Personal Data Protection Act of Taiwan, you may exercise the following rights in respect of the personal data we hold about you.

• ・To make an inquiry about, or request to review, your personal data
• ・To request a copy of your personal data
• ・To request that your personal data be supplemented or corrected
• ・To request that we stop collecting, processing or using your personal data
• ・To request that your personal data be deleted

How to exercise your rights: please contact the point of contact in Section 13 with the content of your request, your name and your contact details. To prevent impersonation, we may ask you to present documents confirming your identity. As a rule we reply in writing or by email to the contact details given in the request.

Scope: we handle requests across the booking system, our LINE Official Account, the email used for inquiries, the purchase history stored in our store point-of-sale system, and the paper forms and measurement records kept at our stores. For the booking system, we handle inquiries, reviews and corrections ourselves through its administration screen, and carry out deletions by requesting them from the provider of that system. Even after deletion, business records such as the date, time and amount of a booking may remain in a form that cannot identify an individual.

Response times: we reply within 15 days to requests to make an inquiry, to review personal data or to receive a copy, and within 30 days to requests for supplementation, correction, cessation of collection, processing or use, or deletion. Where unavoidable circumstances arise, we may extend each period by up to the same length of time, and will notify you in writing of the reason for the extension.

Fees: we may ask you to bear the necessary costs of providing a copy.

Where we cannot meet a request: if a ground prescribed by law prevents us from meeting your request, we will inform you of the reason.

11. Personal data of minors

If a minor, meaning a person under 18 years of age under the Civil Code of Taiwan, provides personal data, please do so with the consent of a person with parental authority or another statutory agent.

12. Revisions to this Policy

We may revise this Policy in response to changes in legislation or in our services.

Where we make a significant change, we will publish it on this Site and also notify you by reasonable means, and we will obtain your consent again for any change that requires consent by law. We retain previous versions and records of consent.

13. Contact

For inquiries about our handling of personal data and for requests under Section 10, please contact us at the following.

• ・Nishikawa Taiwan Co., Ltd.　14F, No. 51, Section 2, Keelung Road, Xinyi District, Taipei City
• ・Please contact us through the inquiry form on this Site.

Established: 16 October 2026　Last revised: 16 October 2026